This notice describes the categories of personal data processed in connection with the Lüks Casino platform, the purposes for which such data is used, the retention periods applied, and the third parties with whom it may be disclosed. By registering an account, the player accepts the practices described herein, which supplement the Terms and Conditions.
Data Collected
The platform collects data from three principal sources: information the player submits during registration, information generated automatically by platform systems during use, and information transmitted by payment processors following a completed transaction. The Company does not acquire personal data from external sources for marketing purposes.
| Type of data | Why we collect it | Retention period |
|---|---|---|
| Phone number and email | Account creation, login authentication, and player contact | For the duration the account remains active |
| Name and date of birth | Confirmation of the 18-year minimum age and account ownership | For the statutory period |
| Payment details | Execution of deposit and withdrawal transactions | For the statutory period |
| Betting and game history | Settlement, bonus wagering verification, and complaint handling | For the statutory period |
| IP address and device data | Security monitoring and detection of duplicate accounts or fraud | For a defined period following creation |
| Support correspondence | Handling and resolution of an open case | For a defined period after case closure |
| Cookie records | Session continuity and retention of language/preference settings | For the cookie's operational lifetime |
Legal Bases for Processing
- Contractual necessity — account opening, wager acceptance, and payment execution.
- Statutory obligation — age verification, identity checks, and record retention.
- Legitimate interest — fraud prevention, bot detection, and control of duplicate accounts.
- Consent — dispatch of bonus notices and promotional communications.
Consent relating to notifications may be revoked at any time without effect on account status; revocation halts only marketing communications.
Cookie Policy
Cookies are small text files placed by the player's browser. Strictly necessary cookies are indispensable for session continuity and platform operation. Preference cookies preserve language and display settings. Analytics cookies produce aggregate usage statistics and do not serve to identify any individual player.
Cookies may be managed, deleted, or blocked via browser settings; disabling strictly necessary cookies will prevent login.
Disclosure of Data
- Payment processors — restricted to what is necessary to complete a transaction.
- Game studios — for verification of round results and wager records.
- Identity verification vendors — for confirmation of age and account ownership.
- Regulatory or competent authorities — where legally mandated and to the extent required.
The Company does not sell personal data for advertising purposes and does not lease its customer database to any third party. Processors engaged by the Company act solely on its behalf and pursuant to its documented instructions.
Security Measures
Communications between the platform and the player's browser are encrypted. Passwords are stored via a non-reversible hashing method, such that no individual, including support personnel, can access a player's actual password. Access to stored records is restricted according to function: payment records are accessible only to the payments department, and case files only to personnel assigned to the relevant matter.
Account security also depends on the player: passwords should not be reused across other services, verification codes must not be shared, and sessions should not remain active on unfamiliar devices.
Rights of the Player
- The right to obtain a copy of personal data held.
- The right to request rectification of inaccurate or incomplete data.
- The right to request erasure of data no longer subject to a statutory retention obligation.
- The right to object to marketing communications and to withdraw consent.
Requests exercising these rights should be directed to support. Account closure does not entail immediate deletion of all data; payment and betting records are retained until expiry of the applicable statutory period, at which point they are erased. Self-exclusion records are preserved until the exclusion period concludes, in order to maintain the effectiveness of the exclusion, as further described on the Responsible Gaming page. Procedures applicable to disputes concerning data processing are set forth on the Player Complaint Policy page.
Amendments
This notice may be amended from time to time. The version published on this page constitutes the operative version and is effective upon publication. Where an amendment expands the categories of data collected or the scope of disclosure, notification will be sent to the contact address associated with the player's account.